CYBERSECURITYTRACKER
Permanent story citation

How to contain shadow AI, as it takes on multiple forms and spreads throughout your environment

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11070

As cited

Copy frozen at (site build).

ai security

How to contain shadow AI, as it takes on multiple forms and spreads throughout your environment

Shadow artificial intelligence (AI) now extends beyond simple chatbots to encompass local models, coding assistants, autonomous agents, and embedded features, creating pervasive detection and control challenges across enterprise environments. Organizations should implement employee security awareness training, establish clear AI acceptable use policies with approved tool lists, and integrate shadow AI detection into unified exposure management platforms. IBM data shows shadow AI security incidents have doubled to 43%, with breaches averaging $5.39 million in costs and half resulting in data loss or compromise.

Why it matters: Security teams must act now to inventory and govern unsanctioned AI tools employees are already using in production systems, as these bypass policy enforcement and create blind spots for data exfiltration, compliance violations, and system compromise.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary